Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Infrastructure Entitlement Management (CIEM)Hard
A cloud security engineer needs to establish a robust process for continuously validating that all new and existing IAM roles and service accounts adhere to a strict least-privilege policy across their multi-cloud environment. This validation must include checking for any accidental or malicious privilege escalation paths. Which Prisma Cloud CIEM feature set provides the most comprehensive and continuous validation for this requirement?
- APeriodic CSPM compliance scans for misconfigurations.
- BAutomated data classification and data governance policies.
- CContinuous identity posture assessment combined with Identity Graph Analysis.
- DReal-time network traffic analysis and flow logging.
Show answer & explanationAnswer & explanation
Correct answer: C. Continuous identity posture assessment combined with Identity Graph Analysis.
Continuous identity posture assessment regularly evaluates all identities against defined least-privilege policies. When combined with Identity Graph Analysis, it provides a powerful capability to not only check direct permissions but also uncover complex, multi-hop privilege escalation paths, offering the most comprehensive and continuous validation.
Why the other options are wrong
- A. CSPM scans are good for misconfigurations but less effective for complex identity access paths and continuous privilege validation.
- B. Data classification and governance focus on data, not the validation of least privilege for IAM roles and service accounts.
- D. Network traffic analysis focuses on network communication, not identity permissions or privilege escalation paths.
Continuous Identity Posture Validation
The ongoing process of assessing and enforcing least privilege for all identities by combining regular checks of assigned permissions with advanced analysis of potential privilege escalation paths.
- Ensures least privilege over time
- Detects privilege creep
- Integrates multiple CIEM capabilities
Memory trick: Stay lean, stay safe – always checking identity posture.